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Amendments to the Claims; 

This listing of claims Vi^ill replace all prior versions, and listings* of claims in the application: 
Listing of Claims: 

1 . (Original) A method of protecting a iisemame during authentication^ the method 
comprising: 

obtaining a plain text username over a secure communication channel; 
obtaining a server identifier for a server; 
obscuring the plain text username using the server identifier; 
providing the obsciired username and the plain text username to the 

server; and 

communicating authentication information including the obscured 
username over a non-secure communication channel from a client. 

2. (Original) The method of claim 1, wherein the server identifier is a uniform 
resource locator (URL) corresponding to the server. 

3. (Ori^nal) The method of claim 1, wherein the server identifier is an 
authentication domain corresponding to the server. 

4. (Original) The method of claim 1, wherein obscuring the plain text username 
using the server identifier comprises encxypting the plain text username using an encryption 
method. 

5. (Original) The method of claim 1, wherein the encryption method is advanced 
encryption standard (AES). 
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6. (Original) The method of claim 1, wherein the client is a wireless device. 

7. (Original) The method of claim 1, wherein obtaining a plain text usemame over a 
secure communication channel comprises establishing an encrypted communication session 
between the user and the server and commimicating a plain text usemame from the user to the 
server, 

8. (Original) The method of claim U wherein the authentication information satisfies 
a plain text, unencrypted authentication scheme. 

9. (Original) The method of claim 1, vdierein the server identifier is a combination 
of an authentication domain and a uniform resource locator (URL) of Ute server. 

10. (Original) A usemame protection process comprising: 

registering a user with a selected server by requesting and receiving a 
plain text user identifier, creating an obscure version of the plain text user identifier, 
and storing the plain text user identifier and the obscure version of the plain text 
user identifier on the selected server; and 

Initiating a communication session between the user and the selected 
server by the communication of the obscure version of the plain text user identifier 
over a plain text communication channel. 

1 1 . (Original) The process of claim 10, \siierein the user is a wireless client device 
communicating over a non-encrypted channel. 

12. (Original) The process of claim 10, wherein communication over a plain text 
channel involves the obscure version of the plain text iiser identifier and commimication over a 
secure channel can use the plain text user identifier. 
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13. (Original) The process of claim 10, wherein the obscure version of the plain text 
user identifier is stored on the user device. 

14. (Currently Amended) A system for protecting a usemame during authentication 
over a non-encrypted channel^ system comprising: 

a client device being configured to communicate Information over 
unsecure communication channels using an obscured user identifier ; and 

a server having stored therein a plain text user identifier communicated 
by the client device over a secure communication channel and df^ the obscured user 
identifier corresponding to the plain text user identifier. 

15. (Original) The system of claim 14, further comprising a registration device being 
configured to communicate information over secure communication channels. 

1 6. (Original) The system of claim 1 wherein the client device and registration 
device are the same device. 

1 7. (Original) The system of claim 14, \^erein the client device does not encrypt 
communication when communicating with the obscured user idmtifier created fiom the plain 
text user identifier. 

<f 

18. (Original) The system of claim 14, wherein the client device has stored therein the 
plain text user identifier and the obscured user identifier. 

19. (Original) The system of claim 14, wherein the obscured user identifier 
corresponding to the plain text user identifier is created by encrypting the plain text user 
identifier with a key. 

20. (Original) The ^j^stem of claim 1 9, wherein the key is based on die uniform 
resource locator (URL) of the server or an authentication domain of the server. 

-4- 
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